Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Simulated phishing
open-in-new
<p>Simulated phishing or a phishing test is where deceptive <a href="/facts/Email/6pD9GLtI">emails</a>, similar to malicious emails, are sent by an organization to their own staff to gauge their response to <a href="/facts/Phishing/hvgfz4U8">phishing</a> and similar email attacks. The emails themselves are often a form of training, but such testing is normally done in conjunction with prior training; and often followed up with more training elements. This is especially the case for those who "fail" by opening email attachments, clicking on included weblinks, or entering credentials. </p><p>Typically, phishing simulations are conducted on a recurring basis to measure long-term improvement in user behavior and to maintain heightened awareness among staff. Regular simulations also serve to identify employees who may need extra support in understanding cybersecurity threats. </p>